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SUBJECT: Use of Initial Dissemination Criteria as a 

Means for Defining ''Need to Know" in Retrospective 
Retrieval of DO Intelligence Information Reports 


The following is presented to explain what we believe would 
he an acceptable method by which "need to know" access controls 
cn retrospective retrieval of DO reports from the SAFE C § D 
cata banks could be established. At the outset we wish to mak.e 
clear that we are concerned with all classified DO product and 
rot just ORCON controlled information. The initial statement 
cf need filed by components within any agency with their central 
init responsible for disseminating incoming message traffic must, 
it seems to us, be an effort to validate and define "need to 
I now" for the concerned element. These definitions and para- 
neters for limiting initial access to information can and must 
Be applied to retrospective retrieval to maintain any semblance 
of "need to know" access control. 


I 1 . We believe that all customers receiving DO intelligence 
information reports base the initial dissemination of these 
ifeports to analysts in their various components on established 
''need to know" criteria. These criteria relate to specific and 
officially authorized functions essential to accomplish national 
security task§, In order not to inundate analysts with irrev’- 
elant information, the initial dissemination must' per force be; 
Himited to analysts v;hcse official duties relate to the geographic 
dnd substantive nature of the reports. ' 


2. These "need to know" criteria are normally expresseji in 
Statements of needs or profiles filed by the various components 
with the central dissemination facility in each receiving agency 
dr department. Further, these profiles may be computerized so 
tjhat by the use of a keyword dictionary, reports are then selected 
itesponsive to the needs of the various offices in each component. 


3. The success of applying these initial "need to know" 
driteria to a retrospective retrieval system is dependent on the 
ability of each consumer to monitor these statements to ensure 
nhat they are valid and as complete as possible. There should 

allso be a ^ - ’ - ' - ^ 

tjo the statements 
qoncerned. 


are valid and as complete as possible. There should 
periodic revalidation procedure to provide currency 
itements filed in relation to the mission of the unit 
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■ 4 Such a procedure has been established within CIA by 

ricvulation The purpose of this procedure is to more closely 
ijcguiation.i. I i ^ the need to know principle in dis- 

‘ieSiiatioJ within^CIA of foreign intelligence information reports. 
StssMliation requests sent to the responsible dissemination 
Office in the Office of Communications must be approved by 
Znilr s?a£f officer in the Directorate of Operations^pnor to 
iLplementation. The procedure further provides that these 
reauests will be reviewed on at least an annual basis by the 
Originating component and revalidated by the same DO staff. 

eLl^pe «;LMng ^ra^ty^f cri%§T^5rm“a?ef 

Ji?ion envelope could be used also for retrospective retrieval 
purposes . 

; 6 we propose that the same profile for initial 

Aon be used to establish limits on 

f«?arch access to DO product contained in DI/SAFE (or blA/bAibj. 
Thic is not in our view, the optimum in need to know but it is 
one'we think both the collector and consumer can live with wi 
oiut major sacrifice for either, 

: 7 We recognize that there will be circumstances where 

nnalvsts' responsibilities or interests will unexpectedly 
transcend the^initial "need to know" distribution.^ For instance, 
an analyst with geographic ’responsibilities following nuclea 
proliferation in a . given country or region 

tU obtain a elobal view of nuclear proliferation. In .such a 
Ssf there will most likely be an office or offices with func- 
tional responsibility that received all /S™^^®Thus 

that ^opic world-wide, e.g., in CIA it would be NED/OSWR. Thus 
thfget?ttphic analyst would go to the office with broader respon 
sLilities^and make his needs known before all pertinent 
Jbot frorthe system could be retrieved. This would be a method 
$ Jafidating the new "need to know" and 

fhr ranid access to required information. Clearly there are a 
llblrof tattttioL possible for this type validation but the 
tKna?Lnt element in every case is to build a system which elim- 
inatL the possibility of- single analyst unilateral access to 

the entire data bank. 

! 8. In sum, if DI/SAFE, or for that matter 

data base, could limit the retrospective retrieval to the initial 
d^issemination profile this would be a critical initial step in 
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satisfyirig DO's concerns regarding the retention of the "need 
to know" in any computerized data base that incorporates its 


prbdudt. 


25X1 


Policy and Coordination StaJ 
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